Norton/Symantec, in its ever-ibimitable wisdom installs its Internet Security and Utilities packages into a locked folder(s). By locked I mean that one CANNOT modify (Rename, Delete, etc) the installed folder(s) and any of its sub-objects. I AM an administrator user, so I SHOULD (expect to) have such ability. Rather, I am issued Access Denied errors when attempting any form of modification of the folder(s) and/or its sub-objects. When attempting to change access security on the folder (modifying Administrator's access rules) I am again denied access...stupid. Can't get there from here!!!!

What does one do to overcome this most annoying impediment? I'm assuming that it would be through acces of the Local Security Policy function.

Probably some negative comment is due Microsoft for its clumsy implementation of security and the difficulty(s) trying to manage it, resulting in utter frustration.

Technically local security policy is by definition "local" to that machine. You can try copying the contents of one machines' LGPO contents to another, but this isn't always going to work. I guess the question is, are all of the settings you are modifying in the local GPO policy? If so, they're all just registry settings, so figuring out which registry value each policy changes and to what data you'd like the value set means you can really do this with a .reg import of the settings. Unless you're modifying things like adding certificates or setting service configuration (both of which can be scripted using other tools, btw), anything in the Administrative tools section (and a lot of things in the other sections) are just registry values.

Will either of these allow me to restrict drive access to a single user only? I've tried to restrict drive access with Group Policy Editor but it applies the restriction globally--even to me the administrator.

Could anyone let me know if this is possible and how to do it?

Much thanks.

A:Group Policy Editor or Local Security Policy

I take it that you want to restrict access to this drive to everyone but yourself. Which drive are you referring to, is it locally connected or via a network?

I have a problem of adding user in the section of "Access this computer from the network" & "act as a part of the opreating system"

I am explaining the route i:e
Control Panel->Administrative Tools->Local Security Policy->User Right Assignment
in the right pane u'll see both option that are "Access this computer from the network" & "act as a part of the opreating system"...
after double clicking on it there will be a option

"Add users or Group"
that option is disabled......i want to add user their for my requirement .....
So please assist me that how can i able to enable this option and from where...

Under Administrative tools, I don't see " Local Security Policy" to set some of the advanced Security UAC policies. I have 1 Laptop running Basic, 1 Running Premium and neither have the Policies Im looking for.

I have Business Vista loaded in Virtual PC to play around with settings and such, and this does have it. Does Local Security Policy only come on business and above versions of Vista?

To map this out: Start=>Control Panel=>System and Maintance=> Admin Tools. Off of Admin Tools I should see "Local Security Policy" But I dont. Any Ideas why?

I can't find local security policy under administrative tools on control panel, i have also tried accessing it by going to run and typing "secpol.msc" and it says windows can not find "secpol.msc" Im wanting to get into the local security policy as i want to set the password expire date and to promt users to change their password on first login, how can i get the local security policy or is there another way of doing what i want to do. I am also the administrator of the computer

Friend of mine has problems in setting Local Security Policies. He tried gpcedit.msc and secpol.msc and he tried Control Panel > Administrative ToolsSelect: Local Security Policy (when prompted, click Continue)In the left pane, expand Local Policies and click Security Options.In the right pane, scroll down to User Account Control:Double-click on: "Behavior Of The Elevation Prompt For Administrators In Admin Approval Mode"In the drop-down box on the Local Security Settings tabSelect Elevate Without Prompting, Click Apply/OK.Note: run Windows Vista with UAC turned off as this also turns off the "Protected Mode" in Internet ExplorerNo sign of LSP. Any other suggestions?

A:Local Security Policy

Try typing "Local Security Policy" at the Start button (without the quotes) - it brought it up in my copy of Ultimate (maybe this is an issue with Vista Home being like XP Home?).

I've tried everything. run the services. msc as administrator, did a system restore (with Norton disabled and in Safe mode), did the netsh winsock reset catalog, did tcp/ip repair, scanned as administrator....

A new network admin came to our office and he restricted all the users in Local Security Policy. I can not install or remove a program, and can not access many other tools of windows that i use on daily basis. Even USB is not working. Is there any solution or way to bypass this security policy. I,m using windows 7 and i,m a user. He has the admin account.

A:How to bypass local security policy?

You take it up with them. This is a work environment, and they put those policies in place for a reason, and we will not assist in bypassing them. May want to re-read the rules page at techguy.org/rules.html

As a result, I'm going to have to close this thread. Thanks for understanding,

What can I do in the LSP to enhance my machine and windows 7? I love customization, but don't want to go in to anything an start clicking. I really don't know what else I can do with it inside the LSP. For example, I added the CTL + ALT + DEL function.

Hi,I was just wondering after looking through the Local Security Policy area of windows Vista if;

You can disable the changing of the option to view hidden files or folders for all users except Administrators.Also if you can disable the searching of hidden files or filders for all users except Administrators.

Ive looked in the Policy but cant see anything there, i thought it could of been an option.Is there a script anywhere or registry editing?

Plus what settings in there would you disable for most users, can you disable CMD?

I have a new machine with vista ultimate, trying to access vista home computer on the network. Vista home does not have local security policy in admin tools, how can I get the "login failure" error resolved without being able to change who can access the computer?

Question, anyone know why I have no "Security Policy" available on a Dell supplied version of XP Pro? I bought XP Pro OEM for my older pc and able to make specific changes, but not on my new PC.Is this feature turned off, or you think I can install it with my OEM CD?

I need to change some settings in the Local Security Policy but when I go into Control Panel-->Administrative tools, it is not there. Does anybody have an idea of where else Local Security Policy would be? Is there a Run command I could enter? I am running Windows XP Home SP2.Thanks.

Okay, so, I was going to restrict access to my computer to a limited account for everyone else since I had unexpectedly discovered nasty malware on my system. So I go to Control Panel » Administrative Tools » Local Security Policy. Then I get this message:

"The Group Policy security settings that apply to this machine could not be determined. The error returned when trying to retrieve these settings from the local security policy database (%windir%\security\database\secedit.sdb) was: The parameter is incorrect. All local security settings will be displayed, but no indication will be given as to whether or not a given security setting is defined by Group Policy. Any local security setting modified through this User Interface may subsequently be overriden by domain-level policies."

I can't figure out what this idiot did to my computer. Just before this happened I had to fix a logon log off loop on my machine. I just want to know if there is any possible way I can just copy and paste the entire contents of C:\WINDOWS from the Win XP Pro Install CD to my HDD? I do NOT want to format and reinstall. Please help.

A:PROBLEM with Local Security Policy and more

Oh yeah, and I forgot to say,

I right click on policy and click properties... Nothing happens. Same with help for ALL of Windows. Its like half the registry and actual Windows files just went *poof* gone.

I'm using windows 7 ultimate,I recently found that in my administrative tools, there is no "local security policy". I tried to add the snapin through mmc there also i cannot find local security policy. should i register any .dll file?

Any help would be appreciated...

A:Cannot find local security policy

Quote: Originally Posted by Delphin

Hey guys,

I'm using windows 7 ultimate,I recently found that in my administrative tools, there is no "local security policy". I tried to add the snapin through mmc there also i cannot find local security policy. should i register any .dll file?

K so I have windows 7 pro 32bit installed on my little brothers pc.. He's pretty young so my goal is to setup a pretty kid safe desktop/browser environment...I currently have his account setup to autologon into his limited user account..Whenever I try to go into gpedit from his account as admin it sets everything I want to change to both the admin and the limited account (disabling control panel, etc etc)..Am I missing something here or is this just how it is when setting up policies on local machines? Any tips/advice is greatly appreciated..thanks

A:Local Security Policy Question

Policies apply to all users. You can follow this procedure to apply policies all users except Administrators:
How to apply local policies to all users except administrators in a workgroup setting in Windows 2000
Applies to XP, Vista, and Win 7 as well as Win2K

I am running Vista Home Premium. I know it does not have the Local Security Policy. Does anyone know how I can go about changing auditing services like turning on Logon Success and Logon Failure audits. Also, do you know where to change the options for password lengths, complexity, and expiration's?

I'll precede my question by stating that I had a couple viruses that I believe are gone now, the problems I am having may be remnants of them. First problem was with Office install, there was a restriction on a registry key, I was able to get the permissions back for the key and installed successfully. Now I am trying to update to Windows Media Player 11, and am getting an error code C00D2AFB also 80070005 General access denied error. Which I think may be another restriction problem. Have had no problems with any other software vendors other than Microsoft. Also I don't know if this is odd but, under administrative tools there is NO Local Security Policy listed there, but this is XP Sp2 Home, I don't know if that is only for professional. How can I get it back, and restore all policies to default?

Ok, here is my issue I was trying to change my sharing settings so my dad could read a folder on my laptop which I went to the advanced sharing and had selected share. He still was not able to access this folder. I went to my Network and Sharing Center and made sure network discovery, file and printer sharing were on and password sharing was off. I still was not able to share my folder so I undid all of that. I then read this article about changing the local security policy. I went to the local security policy and went to Local Policies then Security Options and scrolled to Network Security: LAN Manager Authentication level and changed it to Send LM & NTLM - use NTLMv2 Session security if negotiated. The default of this policy was set to nothing before. I cant seem to change it back to the default which was set as nothing. Will having this policy set affect any programs or applications at all ? Is there a way to change it back ? If you cant help with my sharing problem can you at least help me figure out how to set this Security Policy back to its default. thanks

A:Local Security Policy - Windows 7

For the sharing issue, you can just create an admin account, give your father the name and password of it, and add the account to the permission list.If you do not would like to do this (as you choose the option "password protect off"), you can modify this group policy:Computer Configuration --- Windows Settings --- Security Settings --- Local Policies --- Security Options, find this:Network access: Sharing and security model for local accountsChange it to Guest Only. Here is the explanation:If this setting is set to Guest only, network logons that use local accounts are automatically mapped to the Guest account. By using the Guest model, you can have all users treated equally. All users authenticate as Guest, and they all receive the same level of access to a given resource, which can be either Read-only or Modify.

Sorry if this thread already exists but just wondering if there is any way to apply the local security policy in windows XP pro to only one account? Specifically apply to every account but the administrator account, as a limited administrator account is useless to me.

Thanks.

A:Solved: Local Security Policy?

For almost every policy in secpol.msc, you assign the attributes of that policy to particular users or groups. Administrators can be left out if you like.

Hello I am using Windows 7 Ultimate x64 and trying to change a few simple policy's' I am currently the only user on the computer. When I open the Local Security Policy editor I get no useful settings or options.

A new network admin came to our office and he restricted all the users in Local Security Policy. I can not install or remove a program, and can not access many other tools of windows that i use on daily basis. Even USB is not working. Is there any solution or way to bypass this security policy. I,m using windows 7 and i,m a user. He has the admin account.

A:How to bypass local security policy?

Hello to BCDue to our forum rules we really cannot help you do what you want to do. Your admin probably implemented it as a security feature to prevent bad software from being installed on the machines, I would go ask him if you need to install something.Per this forum rules:"No subject matter will be allowed whose purpose is to defeat existing copyright or security measures. If a user persists and/or the activity is obviously illegal the staff reserves the right to remove such content and/or ban the user. This would also mean encouraging the use or continued use of pirated software is not permitted, and subject to the same consequences. "

I have Windows 7 Home Premium and want to modify my local security policy. I go into the Administrative Tools and the Local Security Policy link is nowhere to be found. Where am I able to edit my Local Security Policy in Windows 7 Home Premium? After I posted this question, I found out that the Local Security Policy Editor is not included in the Home Premium Version. Is there a Pwer Suite that I can download to get into the Local Security Policy or something? Or do I have to upgrade to a higher version of Windows 7?

A:Windows 7 Local Security Policy

Hi BrianHarper, you are correct, Group Policy is not included in Windows 7 Home Premium, same as Windows Vista Home Premium. I consider you may need to upgrade to Windows 7 Professional to get this function. Thank you.Sean Zhu - MSFT

1) I have configured local security policy in windows 7 professional under run-->secpol.msc--> Securuity policies-->Account policy---->Password policy

a) Minimum password length is set to 8 charactersb) Password must meet complexity requirements is enabled (I have set a password which has lower case/number and special character)c) Maximum password age is set to 3 days

This means password will expire in 3 days. I need to change the password after 3 days correct?

d) Enforce password history---15 passwords remembered

This means the last 15 passwords is remembered so that user will not go back to the previously used password. Is this correct?

e) Minimum password age

I have set the minimum password age to 1

Does this mean password can be changed after 1 day?Does this mean password cannot be changed before 24 hours (Once the password is set)? I may be wrong here because I was able to change the password before 24 hours. If I'm wrong please explain me what is minimum password?

Also for point d) Initially I set the password as "X" and then changed to "Y", I changed it back to "X" and still there was no error. Enforce password history says we cannot use the same password which was used previously but I did not get any error while changing the password (Changed it to the same password "X" which I used in the first instance).Please help me in understan... Read more

A:Local security policy in windows 7

Hello RFED,

That's how I understand it.

Just to verify, did you also enable password expiration to enforce your min/max password age?

My local security policy on my Win 7 Pro x64 machine is only showing a limited set of policies (see below). I need to modify "Network security: LAN Manager authentication level" in order to remotely connect to my PC at work. But that policy does not appear in my local security policy. I have tried the following:

1. using "Security Compliance Manager" and "Local GPO" to install the default set of policies.
2. adding "LmCompatibilityLevel" registry key set to "1", see: LmCompatibilityLevel.
3. at least three "sfc /scannow" followed by restarting.

with no luck. Would appreciate your insights. ced

A:Incomplete local security policy

Try the search here:

Group Policy Search

Use the filter and tree views to find out how to apply the required settings either via Local Security Policy or via the registry if the LSP setting is not available on your machine.

As for LMCompatibility Level - I had the same issue and manually created the required registry key. I ran the software mentioned in the following link on another forum.

https://forum.avast.com/index.php?to...3725#msg943725

It provides links to resources about LMCompatibility Level (if it detects that it needs fixing)

On yesterday, I read a blog from Prevx regarding the "black screen" that is happening with a lot of Windows 7 and Vista users after running updates, etc (I run Vista). I thought this may have been my problem, as I have a 1.5 yr old monitor that just blacks out at will. I attempted to download the fix, directly from the blogsite, Prevx Black Screen Fix Blog and from that point, lost my internet connection (wireless), and could not reconnect.The fix was an executible file, "fixshell.exe" with additional instructions to run "http://info.prevx.com/download.asp?GRAB=BLACKSCREENFIX", after download through the Task Manager. By the time I clicked on the download, the internet connection was lost. I called the support desk for Belkin (the wireless router) and LinkSys (the wireless adapter), and both said their components were operating fine after a few instructions.When I hover over the network icon in the system tray I recieve this message: "The dependency service or group failed to start". I am also unable to do a Restore as all the Restore Dates have been wiped out.When I click on the network icon to 'diagnose and repair', I receive this message: "Could not start diagnostic policy service on local computer. Error 5: Access denied." I get this also when I attempt to manually start the Diagnostic Policy Service.I ran RegistryPatrol last night, and attempted to change the parameters of the DPS by creating a "Trusted Installer&quo... Read more

A:Diagnostic Policy Service - Access Denied

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explanation about the tool. No inp... Read more

Running around in circles for hours trying to resolve this issue. Message is Event ID: 7023 The Diagnostic Policy Service service terminated with the following error: Access is denied. This problem is NOT about accessing the internet, as I am here on the forum posting this. It's about other event errors caused by this. Event ID: 7023 Diagnostic Service Host service terminated with the following error: The requested control is not valid for this service and Event ID: 7023 The Diagnostic Service Host service terminated with the following error: The requested control is not valid for this service.

The DPS service is set to automatic start up, but it can't start at boot, which I assume that it is a SYSTEM privilege. I checked every entry of the User right assignment of the Local Security Policy and made sure that the SYSTEM, the Admin, and myself (I am the Admin) have access to everything. This is a single user desktop without password or user restrictions. I also modified the registry of the DPS Start: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\DPS\Start and tested it with the values of 0, 1, 2, and 3 and rebooted each time, but it made no difference.

I know their are other threads on here about this particular problem but I am not having any luck with their suggestions so here it is:

I have also tried system restore, but the problem originated before any of the system restore points were created.

This is a customers computer, and I am convinced something happened around 4 or 5 months ago right after he switched from Cricket Mobile Broadband to a standard cable internet connection.

I have tried too many things to list but still with no luck;
- Un-installing and re-installing SP1 and 2
- Re-Installing wireless and wired internet connection drivers and utilities
- Substituting svchost.exe with backed up versions in c:winsxs
- Using a hacking utility to set all the NTFS permissions of the file to allow everyone to do anything
- Scanned for Malaware
- SFC /SCANNOW and CHKDSK /F (both did not find anything)
- Startup Repair from the Vista Install disc

I am tired of messing with it so I backed up all of his files onto my external 500gb USB HDD and I'm going to try re-installing vista... this sucks HELP!!

A:Diagnostic Policy Service (Access Denied 5)

Hello and welcome to the Forums, unless there is a solution for this issue and you have to reinstall, check this out for an easy way to reinstall the OS : Repair Install For Vista
After all you have done , this may be the best and then you would be done with it.

I have a Dell Vostro running Xp Pro SP3. I was trying to disable Autorun for all devices using the Group Policy editor. I ran gpedit.msc, Computer Configuration, Administrative Templates, System. Right-moused on Turn Off Autoplay, clicked Properties. It says Not Configured. I clicked "enabled" and "all devices". Then, if I either click Ok or Apply, I get a message that says "The Group Policy snapin was unable to save your changes due to the following error: Access is denied".

I have Windows 10 Pro v1511 (Nov upgrade). If you go to Local Security Policy > Local Policies > Audit Policy and set a policy, it doesn't stick. If you close and reopen the app again, the previous settings are still there. Is anybody experiencing this ? Please confirm or deny that this is happening on your rig.

Also when Local Security Policy starts, there is an error message about some admx configuration file. Also new to v1511.

A:v1511, Local Security Policy being 'forgetful'

I googled about the configuration 'admx' file issue, and it is known to MS. See this: https://technet.microsoft.com/en-us/windows/dn764773.aspx

Is there a way to get a summary of all the enabled/disabled Local Security Policies? There's a computer with a bunch of configured settings and I'd like to find out a summary of them all, instead of having to manually go to each folder and find them.

A:Local Security Policy - Summary/Details?

Vista and Win7 can give you a nice HTML output, but you can still get verbose text output in XP - gpresult /v > textfile.txt. It's in a text-based format, but it will tell you what policies have been applied, and what settings they are configuring.

I just tried to install Windows Installer 3 on a Win2K system, but due to various security restrictions placed by this computer's previous owner, I got an access denied error.

Being the idiot that I am, I decided to mess with the local security policy of the system, checking every box along the way. After rebooting, however, a new problem arose...

"The local policy of this system does not allow you to login interactively"As I'm sure you can tell, this is quite frustrating. Even more frustrating is the fact that everywhere I've looked tells me to reset the policy from a different computer in the domain. This is a stand-alone system. It doesn't go online. It's not in a network.

So, my question is: How can I reset the security policy when I can't log in? I've got two weeks worth of work on it that has to be turned in by 8AM, which gives me five hours to solve this issue. Thus my problem is compounded.(PS: The computer I'm using now is a different one, obviously.)

A:Local Security Policy - Windows 2000

Hohum, at about 7AM, it became apparent that a solution would not present itself in time. So, being faced with this dillema, I did what any responsible worker would do: Called in sick.

Anyways, I've got an extension on when this needs to be fixed, and I've hobbled my way through most of it. What I'm looking for now is the exact command to reset the local security policy. I'm running off of a Win98 boot disk, so the directory of the exe used would be helpful.

Greetings, I have a problem with the local security policy on all my windows 7 machines (1100 of them). I need to make a change to the "Network security: Configure encryption types allowed for Kerberos" The default is none and I need to add all the check boxes to them. The value should = DES_CBC_CRC,DES_CBC_MD5,RC4_HMAC_MD5,AES128_HMAC_SHA1,AES256_HMAC_SHA1,Future encryption types

If someone knows how to make this change unattended please let me know asap. Thank you!

A:Update Local Security Policy unattended.

It's right here in GPE Klint, gpedit.msc Took me a few minutes to find it.

Not long ago Soul Invictus loaded winXPpro on the PC and confronted an issue. Thats really not surprising. Issues exist using this, the latest & greatest OS in wide distribution world-wide. It was developed upon previous versions, so it really shouldn't come as a big surprise what it does & to some extent, how it does it. Yet, it still exists with functionality barely defined to the novice user, IMHO.I have XP Professional and I'm getting my bearings on the differences between this version and another XP version. I notice this one has a Windows Firewall. My problem is that I used to be able to access my employer's company intranet from home. When I go to the site and enter my login info I get the message: Access Denied (policy_denied). Your system policy has denied access to the requested URL. For assistance, contact your network support team. I'm thinking I have to modify a setting in gpedit.msc, however I can't be sure. Any thoughts of what security setting that needs to be modified? My thoughts are:Policy information in winXPpro is kinda confusing.Like many, I am the network support team in my household.My thoughts are: "What should I do when contemplating changing a setting".Any changes might best be done knowing first what the default settings are.and where to find them.and how to interpret the information available on the OS about these settings. So, I navigated to the "group policies" that typing gpedit.msc in the &q... Read more

I installed a new software on my laptop, Nolio and when I try to start the service I am getting a 1069 unable to login due to service logon invalid. I believe I need to add this service to the security policy but I am using the home version of Windows 8.1 and I do not have access to the local security in the administrative tools. Is there another way to update this information on my laptop.

One of my user accounts have been getting the error above after a shutdown.I tried system restore but it did not work.I have tried disabling non-windows service on startup and that didn't workCan someone help me please!!

A:The Group Policy failed the logon. Access Denied

Here are instructions on how to fix it, or at least, how I fixed a computer at school once.

1. Logon to the machine with a machine administrator account (assuming this issue is with a domain account, if not logon to the machine using another account with administrative privilege). 2. Move the machine to a workgroup from domain. (If it was part of one workgroup then change it to another one or join a domain.) You could do this through Control Panel\System and Security\System and then Change Settings. 3. Restart the machine and logon with a machine administrator account. 4. Delete your user profile data (or move it a different location) completely from c:\users. "C" in my case is system directory but if you have a different one then use that one. 5. Join the machine back to domain account (or to workgroup that the machine was originally joined to), and restart the machine. 6. Logon with your domain account that you were having trouble with. Keep fingers crossed. If all goes well, you should be logged on.

I have a Windows 7 laptop, I haven't been able to log in to my laptop because it keeps saying "Group Policy Failed to Start, Access is Denied." this is my ONLY account on my laptop plus its an ADMINISTRATIVE account, I've tried installing a new driver for Group Policy, that didn't work (via safe mode), I've tried creating a new account through safe mode, it still doesnt work. Please help??